cbcvebase.
CVE-2014-0488
published 2014-11-03

CVE-2014-0488: APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have…

medium6.8CVSS 3.1
AVNACMAuNCPIPAP
APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.

Affected

8 ranges
VendorProductVersion rangeFixed in
debianadvanced_package_tool——
debianadvanced_package_tool——
debianapt< apt 1.0.9 (bookworm)apt 1.0.9 (bookworm)
debianapt>= 0 < 1.0.91.0.9
debianapt>= 0 < 1.0.91.0.9
debianapt>= 0 < 1.0.91.0.9
debianapt>= 0 < 1.0.91.0.9
debianapt>= 0 < 1.0.1ubuntu2.31.0.1ubuntu2.3

CVSS provenance

nvd6.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.5HIGH